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Abstract 

A fixed-point free involution on a finite set S is defined as a bijection I : S ^ S 
such as Ve G 5, 1{I{e)) = e and Ve e 5, J(e) ^ e. 

In tliis article, the fixed-point free involutions are represented as partitions 
of the set S, and some properties linked to this representation are exhibited. 

Then an optimal algorithm to list all the fixed-point free involutions is pre- 
sented. Its soundess relies on the representation of the fixed-point free involu- 
tions as partitions. 

Finally, an implementation of the algorithm is proposed, with an effective 
data representation. 
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1 Introduction 

A fixed-point free involution involution on a finite set is a function which can 
be defined as follows : 

Ve e 5, /(/(e)) = e 



Ve G 5, /(e) ^ e 

Some recent cryptanalysis methods are based on fixed-point free involutions 
on finite sets. Indeed, sucfi functions can be seen as mixing functions with a 
structural weakness, which make them trivially invertible. 

Such functions can be used instead of a cryptographically robust functions, in 
ordrer to study the behaviour of a cryptographyc algorithm [Poinsot (2006)| . An 
other possible cryptographic attack is to find weak keys, such as the algorithm 
is equivalent to a fixed-point free involution Prissette (2004)| . 

Obviously, an algorithm can be use to list all the permutations tt of the finite 
set S Dijkstra (1997)| . For each permutation, / as Ve £ S*, /(e) = tTe, it is easy 
to check the constraint of involution (Ve G S*, /(/(e)) = e ) and the absence of 
fixed-point. 

However, cryptography use large finite sets and using an algorithm to list all 
the permutation is a waste of time, because the number of fixed-point free invo- 
lutions on a set roughly equals the square root of the number of permutations 
on the set. 

In the first part of this article, some properties of the fixed-point free invo- 
lutions are presented and a quick proof is given for each of them. Then, in a 
second part, an algorithm to list all fixed-point free involutions on a finite set is 
described. Finally, an effective data representation is proposed in an example 
of implementation of the algorithm. 



2 Properties of the Fixed-Point Free Involutions 

2.1 Fixed-Point Free Involutions and Partitions 

Let / be a fixed-point free involution on S and define Pi as follows : 

P/ = {{e,/(e)},VeG5} 

Obviously, as / is a fixed-point free involution , e and /(e) — e' generate the 
same subset {e,/(e)} = {/(/(e)), e')} = {/(e'),e'} = {e',/(e')}. Every element 
of S* is a element of a single element of Pi. Thus, the fixed-point free involution 
/ defines the set Pi as a partition of 5, such as the cardinality of every subset 
of Pi is 2. 

Conversely, given a partition Pi of S", such as the cardinality of every element 
of Pi is 2, the involution / can be defined as follows : 

V{e,e'}eP„{ 

As every element of S is an element of a single element of P/, then I{I{e)) = 
I{e') — e. Moreover, as the cardinality of every element of Pj is 2, thus 
Vegs,/(e) 7^ e. So / is the fixed-point free involution defined by P/. 

The fixed-point free involution / can be represented in a single way as the 
partition P/. This property will be use to represent fixed-point free involution 
in a convenient way. 
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2.2 Fixed-Point Free Involutions and Union 



Let / be a fixed-point free involution on S. Let i and j be such asi ^ S and j ^ S 
and i ^ j. Considering the partition P/ of S, associated to /, P/' = P/U{{i, j}} 
is a partition of Su{i,j} and the cardinality of every subsets is 2. So P// can be 
used to represent a fixed-point free involution I' on SL}{i,j}, defined as follows 

Vee5,/'(e) =/(e) 

The main idea of the algorithm is to build a fixed-point free involution, with 
a fixed-point free involution on a smaller set. 



2.3 Fixed-Point Free Involutions and Bijections 

Let / be a fixed-point free involution on 5, 
Let -B be a bijection from S to S' 
Let's define /' from S' to S' as follows : 

I'{e') = BoIoB-^{e') 

Let's prove that /' is a fixed-point free involution. First, Let's prove that /' is 
an involution. 

I'il'ie')) = I' o B o I o B~\e') 
^ I'{l'{e)) ^Bolo fi-i oBoIo B-^{e') 
<^/'(/'(e')) = BoIoIoB-\e') 
^ I'{I'{e')) = BoB-^{e') 
^I'{I\e')) = e' 

So /' is an involution. 

Now, let's prove that /' is fixed-point free. If /'(e') = e', then 

B"^ oPo JoB-i(e') = P"^(e') 

^/oP-i(e') = P-'(e') 

<^ J(e) = e with e = P-i(e') 

However, / is fixed-point free. So the previous equality is false, and /' is a 
fixed-point free involution. 

This property is useful to build fixed-point free involution on any set with 
an even cardinality : one can build a fixed-point free involution on a simple 
set with the same cardinality, then use a bijection to map this fixed-point free 
involution onto the wanted set. 

Without loss of generality, S is defined as {1, 2, 3, ..2n} until the end of this 
article. 
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3 Algorithm 



3.1 Bijections Family 

For the purpose of the algorithm, a family of bijections from S = {1,2, ..,2k} 

to {2, .., 2fc + 2} \ i is needed, with i in {2, 2, .., 2k + 2}. 

Although many families of bijections may be used, the following one is chosen 

( x/ .T + 2ifa; + l>i 
'^^^ " \ x + liix + Ki 

Every element of the family is an easy-to-compute, easy-to-invert, increasing 
function. None of these properties is mandatory; however, they are useful for 
saving time and space. 

Obviously, the inverse function of Bi is : 

1 , nJ x-liix + l<i 
i ^^>~\ x-2\{x + l>i 

3.2 Presentation of the Algorithm 

The goal of the algorithm is to construct the set of the fixed-point free involu- 
tions on the finite set S = {1, 2, .., n}, with even cardinality. The main idea is 
to start with the simple fixed-point free involution represented by the partition 
{{}} then, the size of the set is increased using the "Union Property" and the 
" Bijection Property" . 

This is a recursive process : given a fixed-point free involution on {1, .., fc}, a 
bijection is used to get an fixed-point free involution on {2, .., 2A;-|-2}\i, then the 
union property is used to add the set {1, i} and get a fixed-point free involution 

on ({2,..,2fc + 2}\i)U{l,0 = {l,-,fc}. 

Here is a description of the algorithm, as a recursive function. 

function fpfi(n,S) 
// n ; cardinal of the final set 
// S : current set (initial value = 0) 
if (151 = n) then 
output S 

else 

for i=2 to n 

S' = {{l,z}} 
forall {e, e'} e S 

S' = S'u{{Bi{e),Bi{e')}} 
end forall 
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fpfi(n,S') 
end for 

end if 

end 

3.3 Example 

Here is a quick description of the building of one of the involutions on the set 
{1, .., 6}, knowing an involution on the set {1, .., 4}, for example the involution 
I such as : 

P/ = {{1,3},{2,4}} 

There are 5 involutions built on /, each of them includes {1, i} with a different 
value of i in {2, ..,6}. For each of these involutions, the associated partition is 
built using / and Bi. 

For example, for i = 5, the elements of the partition are : 

• the element {1,5}. 

• the elements built with and P/ : 

- from {1,3}, compute {55(1), ^5(3)} = {2,4} 

- from {2,4}, compute {£5(2), £5(4)} = {3,6} 

The resulting involution is associated with the set of these three sets : 

{{1,5}, {2, 4}, {3, 6}} 

The following tree shows how some of the fixed-point free involution on 
{1, .., 6} are built. 



{{1, 2}. {:;. --). > 1.0}} 




{{1,6}, {2, 4}, {3,5}} 
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4 Implementation 



4.1 Data Representation 

As previously shown, a fixed-point free involution I on the set S can be repre- 
sented as a partition Pj of S such as the cardinality of every element of Pi is 
2. 

Let's be the set of elements of S defined as follows : 

H{Pi) = {mm(j, j),V{jj}gpJ 
The algorithm represents the partition Pi as an 2n-element array T. 

Mo<k<n. T[2k] e ^l{PI) 

Vo<fe<n-i, T[2k]>T[2k + 2] 
Vo<fc<„-i, T[2k+l]=I{T[2k]) 

Simply speaking, the odd-indexed elements of T are, decreasingly sorted, 

the set of the lowest elements of each set of the partition Pj. The even-indexed 
elements of T are the values associated by / to the odd-indexed elements. 

4.1.1 Example 

Let / be the fixed-point free involution on {1..6} such as I{x) = 1 — x. This 
fixed-point free involution is represented by the partition Pi : 

P7 = {{2,5},{3,4},{6,1}} 

With this partition, is defined as : 

M(P/) = {2,3,1} 

This partition P/ (and so the fixed-point free involution /) is represented as the 
array T : 

T= [3, 4, 2, 5, 1,6] 

4.2 Union operator 

The purpose of the proposed data representation is to speed up the calculation 
of the Union operator. Actually, with this representation, the bijection do not 
destroy the order of the element, and the new couple (1,7(1)) is simply merged 
at the end of the array. 

In many practical implementations, it can be effectively done by allocating 
an array as large as the size of the set, and recursively filling the array from left 
to right. 

An example of such an implementation is given in Appendix A. 
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5 Conclusion 



The algorithm presented in this article was designed to fit cryptographic needs 
of an cfFcctivo algorithm to list all the fixed-point free involutions on a finite set. 
However, the use of such functions is not restricted to cryptographic researches, 
and the algorithm is generic. 
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